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ABSTRACT 

Given a unitary representation of a finite group on a finite-dimensional Hilbert space, we show how to find 
a state whose translates under the group are distinguishable with the highest probability. We apply this to 
several quantum oracle problems, including the GROUP MULTIPLICATION problem, in which the product of 
an ordered n-tuple of group elements is to be determined by querying elements of the tuple. For any finite 
group G, we give an algorithm to find the product of two elements of G with a single quantum query with 
probability 2/|G|. This generalizes Deutsch’s Algorithm from Z 2 to an arbitrary finite group. We further 
prove that this algorithm is optimal. We also introduce the HIDDEN CONJUGATING ELEMENT PROBLEM, in 
which the oracle acts by conjugating by an unknown element of the group. We show that for many groups, 
including dihedral and symmetric groups, the unknown element can be determined with probability 1 using 
a single quantum query. 
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1. Introduction 


Given a finite set of states in a finite dimensional Hilbert space, one may wish to find an optimal measurement, 
i.e., a measurement that distinguishes the states of the set with maximal probability. Indeed, this situation 
arises near the end of many quantum algorithms, when the system is in one of a finite number of states 
depending on some unknown or hidden information, and one wishes to determine this information with 
maximal probability by means of a quantum measurement. 

There is an extensive literature on such quantum detection problems [1-7], and in many cases the optimal 
measurement is known. Of particular interest is the case in which the collection of states is geometrically 
uniform , meaning that there is a finite group of unitary maps that acts transitively on the collection. When 
these states are pure, the least-squares measurement (or square-root measurement) is known to distinguish 
them optimally [7]. 

One way to obtain a geometrically uniform collection of states is to begin with a finite group of unitary 
operators, and consider the orbit of a given initial state | ip) under the group. The various detection theorems 
then tell us how optimally to distinguish the elements of this orbit. Suppose that we are also given the 
freedom to choose the initial state. How should we choose | ip) so that images of \i/j) under the group 
action are maximally distinguishable when the optimal measurement is made? This question, which we call 
Symmetric Oracle Discrimination, is the first question that we address in this paper. 

We can frame this question more precisely: Let G be a finite group and let 0 : G — > GL{V) be a unitary 
representation of G on a finite-dimensional Hilbert space V. Assume that an unknown element g € G is 
chosen uniformly at random and we wish to find g. To do this, we are allowed to chose any initial state 
| ip) £ V, apply the unitary map 0(g) to create the state \ip g ) := 0(g)|^), and then apply an arbitrary POVM 
{ Mh}heG • We wish to choose | ip) and {Mh\heG to maximize the probability that the unknown g £ G is 
measured. We may view this as an oracle problem: determine the unknown element g £ G using a single 
query to an oracle that acts on V by O g = 0(g). 

Since for any | ip) £ V, the collection {B(g)IV’)} is geometrically uniform, the optimal measurement for 
distinguishing these states consists of rank 1 projections Mh = \gh){gh\ that sum to the identity [7]. For 
such a measurement, the probability of measuring h given that g is the chosen element is given by 

Pr(%) = T r(M ft |?/> g }(V> s |) = \(g h \lp g }\ 2 . 

Thus our question can be phrased as follows: 


Symmetric Oracle Discrimination. Given a representation 0 : G —> GL(V) of a finite group G on a 
finite-dimensional Hilbert space V , determine a state \i/j) £ V and collection {gh}hcG of vectors in V such 
that __ 

\ph){ph\=w 

heG 


and so that the success probability 


is maximized. 


1 

Psuccess — TT'fT 

|o-| 


KmsI^ 9 )I 2 

gCG 


As a first observation, we note that the success probability above is limited by the dimension of the span of 
the translates of | ip). Indeed, if we have any n vectors in a Hilbert space which span a subspace of dimension 
k , then a quantum measurement can distinguish among these vectors with probability at most k/n (cf [8] 
and Lemma 1 below). 

For a given representation 0, we let d© denote the maximum over all choices of initial state | ip) of the 
dimension of the span of the orbit of \ip) under the action of G. That is, 

d© = max dim span{0(g) |'</>} | g £ G}. 

Ib> 
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The number cIq is the maximal dimension of a cyclic subspace of V and can easily be expressed in terms of 
the decomposition of V into irreducible representations (see Lemma 2). 

It follows that for any representation 0, we have 


de_ 

Psuccess — 

|U-| 

One may then ask if for any representation, one can find a state that achieves this dimension bound. An 
affirmative answer is given by the following theorem. 


THEOREM 1. Given a representation 0 : G -A GL(V) of a finite group G on a finite-dimensional Hilbert 
space V, there exists a state \ip) £ V for which SYMMETRIC ORACLE DISCRIMINATION can be solved with 
probability 

de 


Psuccess — 1/^1 ' 
\Lr\ 


The construction of an initial state \ip) that achieves this dimension bound is given during the course of the 
proof of this theorem (see Propositions 1, 2 and 3 in §2). In fact, in that section we completely characterize 
the initial states that achieve the dimension bound. 

The second question we address in this paper has its roots in one of the first quantum algorithms, Deutsch’s 
algorithm, which solved the problem of findiug the mod 2 sum of two bits (bo,b±) using a single quantum 
query [9,10]. For the purpose of this query, we have a Hilbert space V = C 2 ® C 2 , where the first tensor 
factor is the query register and the second the response register. We are given access to an oracle 
whose action on V is given by 

O(b 0 ,b i) : I j,r) \j,bj +r), 

where the addition in the response register takes place in the group G = Z 2 . This problem admits a 
probability 1 solution with a single quantum query. We may also ask for the sum of more than two bits; this 
is the PARITY problem studied in [11] and elsewhere. 

One may naturally generalize this problem to any finite group G, abelian or nonabelian. Given an m-tuple 
(go, gi ,..., g m - 1 ) of elements of G , we wish to determine the product gogi ■ ■ ■ g m -\ of the group elements 
in the given order. To set this up as a quantum oracle problem, we take a query register C m with basis 
(|j) | j = 0,... ,m — 1} and response register C G with basis {|g) | g € G} labeled by the elements of G. 
When the j th element is queried, the oracle multiplies gj into the response register. Formally, we have: 

GROUP Multiplication. Let G be a finite group. Suppose that an unknown ?n-tuple (g 0 , gi,.. ■, g m -i) 
of elements of G is chosen. Determine the product gogi ■ ■ ■ g m -1 of the m-tuple using queries to the oracle 
(^(go.si,•••, 9 m— 1 ) that acts on the Hilbert space V = C m (g> C G by 

<9(90 ,gi,...,9m-i) '■ ^ I. b9jr). 


This problem was studied for cyclic groups G = Zj, in [12]. There it was shown that the sum of m elements 
of Zfc can be determined using t queries with probability [m/(m — t)\/k. In particular, the sum of two 
elements of Z^ can be determined with a single quantum query with probability 2/k. Our next theorem 
generalizes this result to an arbitrary group G. 

THEOREM 2. Let G be a finite group of order n. Then there is a single query algorithm for determining the 
product of 2 elements of G that succeeds with probability 2In. 

When G = Z 2 , we recover the probability 1 algorithm for Deutsch’s problem. In §3, we construct the general 
algorithm and prove that it is optimal in §4. 
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In §5 we show how the solution to SYMMETRIC ORACLE DISCRIMINATION can be used to give a representation- 
theoretic interpretation of several other well-known quantum algorithms. This includes the Bernstein- 
Vazirani algorithm [15] and van Dam’s algorithm [13] for exactly identifying an unknown bitstring. 

In §6 we discuss why the addition of ancilla registers may improve the efficacy of symmetric oracle problems. 

§7 introduces a new oracle problem, HIDDEN CONJUGATING ELEMENT PROBLEM, in which we wish to 
identify a hidden group element acting by conjugation. We see that (permitting ancilla registers), many 
groups allow identification of the hidden element with probability 1 in a single query. This includes the 
dihedral and symmetric groups. 

2. Symmetric oracle discrimination 

In this section, we study SYMMETRIC ORACLE DISCRIMINATION, first proving the dimension bound and 
then proving Theorem 1, which asserts that for any representation this dimension bound can be achieved. 
Finally, for a given representation, we establish exactly what choices of initial states give this optimal result. 

Before we begin, let us recall the following general fact, which limits the distinguishability of states in terms 
of the dimension of their linear span (c/. [8], Lemma 6.2): 

LEMMA 1. (General Dimension Bound) Suppose \ipi), i = 1,... ,n are n pure states that span a space of 
dimension k. Then any measurement to identify i succeeds with probability at most k/n. 

Proof. Let pi be the density matrix corresponding to \ipi). Then pi < Tlwi orthogonal projection onto the 
span of the n states. Hence for any measurement {Af,;}, we have 

- V Tr(M iPi ) <-V Tv(MiIl w ) = -Tr(n w ) = -. | 

n n n n 

For Symmetric Oracle Discrimination, we have a finite group G and a unitary representation O : G —> 
GL(V), and we are trying to distinguish among the group translates of an initial state \i/r) G V. The space 
spanned by the orbit of 1 if)), namely 


V v , = span{0( ff )|^) | g G G}, 

is called a cyclic subspace of V. Letting d@ denote the largest dimension of any cyclic subspace of V, 

de = max dim span{ Q(g) \if)) \ g G G}, 

W 

we see that Lemma 1 shows that the success probability for SYMMETRIC ORACLE DlSCRIMI- NATION is 
bounded above by 

de_ 

Psuccess — 

\Lr\ 

We refer to this as the dimension bound for the representation O. To understand the dimension bound 
better, we next give a formula for g?o in terms of the decomposition of V into irreducible representations. 

LEMMA 2. Let O : G — > GL(V) be a finite dimensional representation of a finite group G and let 

V = W® mi © • • • © W® mr 

be the decomposition ofV into nonisomorphic irreducible representations Wk■ Let dk be the dimension of 
Wk and let Ik = min (m,k,dk). Then d e, the maximal dimension of a cyclic subspace ofV, is given by 

de = ^2 ^ dk ■ 

k 
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Furthermore, in such a cyclic subspace of V, the dimension of the isotypic component corresponding to Wk 
is d k h- 

Proof. We first show that for any | tjj) £ V, the cyclic subspace V# has dimension at most Ylk^dk- Since 
Vg, is generated by | if>), there is a C G -module homomorphism C G —> Vg, that is surjective. By Maschke’s 
Theorem, Vg, is a summand of C G . Hence for each irreducible Wk contained in V\j ,, the number of copies 
of Wk satisfies e*, < dk • But since Vg, is a submodule of V , we also have e*, < rrik■ Hence, e*, < Ik.. It follows 
that dimVj/, = ^ ek.dk. < ^hdk, as desired. Note that equality holds if and only if ek = h for all k, that 
is, the dimension of the isotypic component of Vg, corresponding to Wk is dklk for all k. This establishes the 
final statement. 


Conversely, we must show that there exists a | ip) £ V such that the cyclic subspace Vg, has dimension 
exactly h-dk■ Consider the C G -module W = ®W® lk . Since Ik < dk. , there is a surjective C G -module 
homomorphism C —> W. Hence, W is a cyclic C -module. On the other hand, since Ik < mfe, W is 
isomorphic to a submodule of V. Thus, V has a cyclic submodule of dimension dim IT = 'Yhlkdk- 1 

Note that for each irreducible representation V, that appears in V, up to di copies of V z potentially contribute 
to the overall success of the algorithm; beyond that, there is no contribution. Thus we may refer to /, = 
min {rrii, di} as the number of “usable copies” of V t . 


Having established the dimension bound, we now proceed to the proof of Theorem 1, stated in the Intro¬ 
duction, which asserts that for any representation, the dimension bound can be achieved. 


Definition. An optimal input for Symmetric Oracle Discrimination is a state | tp) for which there 
exists a measurement distinguishing the symmetric states generated by \ijj) with optimal success probability, 


i.e., 


do 


Psuccess — 

|U-| 


We begin by characterizing optimal inputs, and then examine the characterization to prove the existence 
of such states. An immediate simplification is to consider only representations for which do = dim V, 
since the dimension bound of a representation determines the largest possible subspace in which the mea¬ 
surement problem takes place. Note that if do = dim V, then the analogous equation is satisfied for any 
subrepresentation of V. 

PROPOSITION 1. Let 0 : G — > GL(V) be a unitary representation on the Hilbert space V such that 
do = dim V. Then \ip) £ V is an optimal input if and only if 

Y j e(gM(ip\e(g- 1 ) = ^ v iv. ( 1 ) 

gCG 1 


Proof. Let \ip) be an arbitrary state. It is well-known that there exists an optimal measurement consisting 
of symmetric rank-1 projections distinguishing the symmetric states generated by | ip), for instance the SRM 
[4,6,7]. Such a measurement is determined by a single measurement vector | p) satisfying the completeness 
relation 

gOG 

and the success probability of the measurement is 

Psuccess = T^I I( 0 (sOV’I 0 (sOm }| 2 = l(V , |p)| 2 - 
11 gcG 
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By taking traces in the completeness relation, we see that ||/i|| 2 = dim V/\G\. Hence by Cauchy-Schwarz, 

M , 11 o ii 11 o dim 
Psuccess — Ill/’ll \\P\\ = |^j > 

with equality if and only if f/> = A/i for some scalar A G C. 

If this is true, then the completeness relation implies (1). Conversely, if (1) is satisfied then the vector 
|/x) = sjd\vaV/\G\\xj)) describes a valid symmetric measurement and the success probability is dimV/|G|. ( 

An interesting corollary to Proposition 1 is SYMMETRIC ORACLE DISCRIMINATION in the case of an irre¬ 
ducible representation. 

COROLLARY 1. Let O : G —> GL(V) be an irreducible representation. Then any choice of initial state is an 
optimal input. 

Proof. For any \%jj) G V , the operator ©(ff)l^)(^l©(ff _1 ) commutes with each 0(A); hence it is a 

C G -module homomorphism. By Schur’s Lemma, it equals a scalar multiple of the identity, and taking traces 
yields the correct scalar. By Proposition 1, \tp) is optimal for SYMMETRIC ORACLE DISCRIMINATION. | 

Next we examine the characterization (1). In the following, the symbol Tg, denotes the operator J2 g eG 1 

for a given | ip). Note that T.^ = J^y W if and only if T ^ = A Iy for some scalar A G C, since the usual trace 
argument deduces A = y , so in checking (1) it suffices to show is a scalar multiple of Iy. 

We are now ready to prove Theorem 1, which asserts that for any representation, there exists an opti¬ 
mal input for SYMMETRIC ORACLE DISCRIMINATION. We proceed in two steps, first reducing to the case 
that the representation consists of a single isotype of irreducible subrepresentations, and then providing a 
characterization of optimal inputs in such representations that clearly describes the construction of such 
states. 

PROPOSITION 2. Let 0 : G —> GL(V) be a unitary representation on the Hilbert space V and let 

V = Vi © • • • © V r = toiWi ® • • • © m r W r 

be the orthogonal decomposition of V into its isotypic components V) = niiWi (where IT) is irreducible). 

Let dk = dim Wk, and assume that nik < <4 for all k = 1,..., r. Suppose |i/>) is an arbitrary state and write 
| ip) = |Vt) + ... + | ip r ) with respect to the canonical decomposition above. 

Then \ip) is an optimal input if and only if ||V’i|| 2 = and the states yj | if>i) are optimal inputs 

with respect to the subrepresentations V);- 

Proof. First suppose \tp) satisfies (1). This equation is invariant under the orthogonal projection Hj 
corresponding to V);- That is, 

E ©(^in^XH^I©^ 1 ) = 

gCG 

Taking traces we see ||V’j|| 2 = , and normalizing the above equation shows that each state \J ^y. \4>i} 

satisfies (1) with respect to the representation V{. 

Conversely, consider | ip) = + ... + \ijj r ) and compute 

= 5Z X! ©(ff)iV’i)(V’ii©(5 -1 ) 

gCG i,i=1 
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Since ©(sOIV’iXVbl^Ks 1 *) is a C G -module homomorphism between Vj and V), the above reduces to 


i= 1 g£G 

\ r \ l/'t I 

So if each summand here is equal to dirn y W, (as the conditions imply), we have that Tp = d j m y W, which 
is exactly condition (1). | 

Proposition 2 reduces the question of the existence of optimal inputs for general representations to that 
of representations with single isotypes of irreducible representations. Thus we tackle this case in the next 
Proposition to prove Theorem 1. 

PROPOSITION 3. Let 0 : G —> GL(V) be a representation on the Hilbert space V such that V = W® m for 
some irreducible representation IT. Let d = dim IT and assume that m < d. Denote by ai : W —> V the 
inclusion of W into the zth coordinate of V. Then a state \ip) & V is an optimal input if and only if \if>) is 
of the form 

1 m 

W) = —j= X^ a *d ei ))’ 

where (|ei), • • •, |e m )} is an orthonormal set in W. 


Proof. Let zr.j : V —> W be the zth projection map. We will denote by p the representation of G on IT. As 
we used in Corollary 1, Tg, is a C G -module endomorphism of V. Taking a basis of V formed from successive 
bases of the irreducible components and applying Schur’s Lemma, we can write T,i, as a block matrix whose 
(z,j)th component matrix is a scalar times the identity. Let |ej) = 7r,;(|z/;}) so | ip) = a i{\ e i))- Then 

noting that the (z,j)th component of is iriT^otj, we compute 


m 

■KiT^oij = TTj y y Q(g)\a s e s }(a t et\&(g)~ 1 aj 

g£G s,£—1 


Since zr, and are CG-module homomorphisms, this becomes 

7T iT^ctj = Pg\ei)(ej\p ~ 1 

geG 

where we used that ir.ia s = 5i tS Iw and {atet\otj = St,j(ej\- Now this component must be a scalar multiple of 
Iw , and taking traces we see that the scalar is Mifiifhl. 

Now Tp is a scalar multiple of the identity (with scalar A) if and only if TrjT^aj = SijXIw which occurs if 
and only if (e,|ej) = Sij This condition means exactly that {ei,... e m } form an orthogonal set of vectors 

in V of length ^. Now if the equation Tg, = A ly holds then taking traces we see A = Yd ■ Hence rescaling 
the vectors {ei,... e m } gives us the needed decomposition of |z/>). | 

This concludes the proof of Theorem 1, since we may construct an optimal input from an orthogonal invariant 
decomposition of the representation and a choice of orthonormal states in each irreducible isotype: in each 
canonical summand an optimal state is constructed as in Proposition 3, and scalar weights are assigned 
to each of these according to Proposition 2 to produce the final state. For optimality, the weights must 
have norm squared proportional to the dimension of the summand, but otherwise the relative phases are 
irrelevant. In fact, we have characterized optimal inputs as those states arising from all such constructions. 
The construction is used explicitly in Lemma 3 below. 
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3. Quantum Group Multiplication 

In this section we prove Theorem 2, giving a single-query quantum algorithm for multiplying two elements 
of a group G with probability 

Before beginning the proof of Theorem 2, we make an observation about our solution to the SYMMETRIC 
ORACLE Discrimination problem given in the previous section. For that problem, we have constructed an 
optimal initial state and measurement, and we know the probability of measuring the correct element g £ G. 
It turns out that it is also useful to know the probability of measuring some other element h given the the 
correct element is g. The following lemma gives a formula of this probability. 


LEMMA 3. Let G be a finite group of order n and let V be a representation of G. Assume that when V is 
written as a direct sum of irreducible representations, each irreducible 14 appearing in the decomposition 
appears exactly dk = dim 14 times. (We leave open the possibility that some irreps do not appear at all in 


the decomposition.) Let \tp) be an optimal input, with p = y ^yypIV’) describing the optimal symmetric 
measurement. Then P(h\g), the probability of measuring h when the chosen element is actually g is given 

by 


P{h\g) 


1 

dim V\G\ 


hvih-'g )] 2 


1 

dim V\G\ 


Y dkXk ^ h 1 g) 

k 


2 


where \k is the irreducible character corresponding to 14. 


Proof. First note that if 0 denotes the given representation of G on V, then it follows that d© = dim V = 
I- Recall the measurements vectors determined by p are ph = @{h)p. Hence 

P(%) = \{g h \%)\ 2 = ^KV*>| 2 = ^MQih-'gm] 2 . 


To examine this more carefully, we describe | if>) according to the construction outlined in Propositions 2 
and 3. Fix an orthogonal decomposition of V into irreducibles with sections ak,i including the ith copy 
of Vk into V and similarly proejctions nk,i : V —> 14. By Propositions 2 and 3, in each 14 the vectors 

i e k,i '■= f° rm an orthonormal basis. We denote f k p = a k ,i{e k ,i) so that \ip) = J2k,i 

Finally let q = h~ 1 g. Then we obtain 


mg) 


l 

de|G| 


Vdkd k '{fk\i'\Q(q)\fk,i) 


Since fk,i lives in the ith copy of 14 in V, which is an invariant subspace, every term in the above sum 
vanishes unless k = k! and i = i' . Thus we obtain 


P(h\g) 


1 

de\G\ 


Y dk ^ k d\ Q ^)\fk,i) 

k,i 


Letting pk : G —> GL(14) be the irreducible representation of G on 14, we see that aik,i commutes with the 
action of G; that is, Q(g) o ctk,i = ak,i ° Pk{g)- Hence the above inner products may be computed in 14 as 


P(h\g) 


l 

de|G| 


^ ' dk {pk,i | Pk (<?) | 
k,i 


For each k, {ek,i, ■ ■ ■ ,£k,d k } is an orthonormal basis of 14- Hence the above sum computes the trace Xk{q) 
of pk(q)- That is, we obtain 


P(h\g) 


l 


Y dkXk ( q "> 

k 
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I 

We now prove Theorem 2. We wish to determine the product of two elements go,gi £ G assuming access to 
an oracle O g0iSl , which acts on W = C 2 0 C G by 

O go , 9l ■ \i,s) \i, 9 is). 

This defines an representation of the group G x G on W. The representation decomposes into two invariant 
subspaces: 

W = |0) 0 C G ® |1) ® C G , 

and each of these two subspaces decomposes like the regular representation of G , with |0) 0 C G containing 
di copies of the irreducible representation V t where the left factor of G x G is acting, and |1) ® C G containing 
di copies of the irreducible representation V- where the right factor of G x G is acting. Note that there 
are two copies of the trivial representation of G x G, but otherwise the Vi and V- are non-isomorphic as 
representations of G x G. 


Throw away the two copies of the trivial representation, and call the remaining space V. We then have 
dim V = 2 (n — 1), and V decomposes as di copies of the V t and di copies of V{. We apply Lemma 3 to this 
situation to find: 


P((ho,hi)\(g 0 ,9i)) 


1 

2 (n — l)n 2 


^2 diXi(h 0 1 go) + ^2 d i*i ( h i V) 


2 


where the sums are taken over all nontrivial irreducible characters of G. Using column orthogonality, this 
simplifies to 

P{(ho, hi)\(go,gi)) = tt, — —rr^( tn ~ 2 ) 2 - 
2(n — l)n z 

where t £ {0,1, 2} counts the number of j such that hj = gg. 


When t = 2, we are guaranteed a correct product; when t = 1, we are guaranteed an incorrect product; when 
t = 0, we have a chance of a correct product. There are (n — l) 2 pairs (ho, hi) for which t = 0. Thus 
the total success probability of getting the right product is 


P m 


2 (n — l)n 2 


( 2 n - 2) 2 + 


2 (n — l)n 2 


(- 2) 5 


n — 1 


(n-1) 2 


2 

n 


as desired. 


I 


Any single nontrivial irreducible representation works for group multiplication. The above 
single-query algorithm for group multiplication uses all the non-trivial representations of G x G appearing in 
C 2 ®C G . We now show that the same success probability can be achieved by picking any nontrivial irreducible 
representation IT of G and choosing the optimal query in the subspace |0) ® W® d (B |1) 0 (W*)® d C C 2 ®C G , 
where d = dim W and W* is the dual representation. 

THEOREM 4. Let G be a group of order n. Let W be any nontrivial irreducible representation of G, and 
let d = dim IT. Let Y C C G be the W-isotypic subspace of C G , i.e., the unique G-invariant subspace with 
Y = W® d . Let W* denote the dual representation of W, and let Y* denote the W*-isotypic subspace of 
C G . Let V = |0) <g> Y ® |1) ® Y* c C 2 ® C G . Consider the Symmetric Oracle Discrimination problem 
for the group T = GxG acting on V, and use an initial state and measurement as described in Propositions 
1, 2 and 3. Then this measurement returns a pair of elements of G, and the product of these two elements 
is correct with probability 2/n. 

Proof. We use Lemma 3 to compute the probability P((ho, hi)\(go, gi)) of measuring a given pair (ho, hi) 
given that the hidden pair is (go,gi). Letting q = (qo,qi) = (h^ 1 go, h^ 1 gi), and noting that dimU = 2d 2 , 
we find 

P((ho,hi)\(go,gi)) = 2 ^ 2„2 \ d Xw(qo) + d\w (gi)| 2 = -^\xw(qo) + Xw(qi)\ 2 ■ 
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For fixed (go, Hi), we wish to sum the above quantity over all pairs (ho, hi) such that hohi = gogi■ This 
condition is satisfied if and only if <71 = g^q^gi- For a fixed qo, there is a unique <71 with this property. 
Thus we see that the success probability for measuring a pair (ho, hi) with the correct product is 


P 


correct product — 


— Ixw(ho) + Xw{gi 1 Qo 1 .9i)| 2 - 


2 n 2 


qo eG 


Since the value of a character is invariant under conjugation and Xw{Qq ) = Xw(qo), we obtain 


Pr, 


correct product OjB ^ ' I^Xw(<?o)| — ^2 ^ ' IXw(9o)l ^ ■ 


9o€G 


9oSG 


4. Optimality of single-query group multiplication algorithm. 

We now prove the optimality of the single-query group multiplication algorithm given in the previous section. 
To do this, we rephrase GROUP MULTIPLICATION as a mixed state discrimination problem where each mixed 
state corresponds to a possible hidden product. For a given initial state \4>), we consider the mixed states: 

Pg = UTT ^9o,9i gi 

9091=9 


The task of designing an efficient algorithm for GROUP MULTIPLICATION is equivalent to picking an initial 
state |'0} and a G-valued POVM that distinguishes these mixed states. Therefore, optimality of the algorithm 
above is provided by: 

THEOREM 5. For any inital state | ip), any measurement distinguishing the mixed states { p g \ g £ G} 
succeeds with probability at most j^y. 

Proof. Fix an initial state \ip). Note that the mixed states enjoy the following symmetry, which is geometric 
uniformity for mixed states: 

Pg = Og, e PeO g l 

where e £ G is the identity element. Eldar et al. [7] show that there exists an optimal measurement which 
also exhibits this symmetry. Hence we consider a POVM {X g \ g £ G} satisfying 

= O g>e X e O~l 

This symmetry combined with the completeness relation imposes some restrictions on the shape of the 
measurement operators. Using the decomposition of our space as |0) ® C G ® |1) ® C G and picking the 
canonical basis in each summand, we may write X e as a 2 x 2 block matrix 


X = 


A C 
C* B 


where A, B , C are |G| x |G| matrices and A. B are positive, 
by g in C G , we have 


= O g , e X e O~l = 


Letting L g denote the matrix of left multiplication 

L g AL* g L g C\ 

C*L* g B ) 


Hence the completeness relation implies 


L g AL* = I and 

g&G 


B = 


I 

W\ 
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We are ready to examine the success probability. 

Psuccess = |Tr (pgXg) = ^g,ePeO g e Og }e X e O g e = Tr(p e ^e) 


g eG 


|G| 


geG 


Now expanding the sum in p e , we find 


.Psu 


= ^Tr (jC Ot >h -x\il;){il>\O hih -iX?J = ^<0| O^X^.^j 


Let X = Y^heG C0+- 1 X e O* h h _ 1 . It is a positive operator. Then 

Psuccess = (0|^f0) 


We can estimate this quantity by examining the structure of X as a 2 x 2 block matrix. Using our previous 
notation for X e , we have 

L h AL* h L h CL* h _ t 
L h -rC*L* h L h ~iBL^ i _ 1 

Now our knowledge about A and B from the completeness relation gives 


CV-iXeOJU-, = 


X = 


I D 
D* I 


where D = ^2 heG ^ J hCL^_ 1 • A lemma from basic matrix analysis ([14] Proposition 1.3.1) states that X is 
a positive operator if and only if ||D|| < 1, where || • || denotes the operator norm. With this in hand we 
perform the final estimation of the success probability. Let |0) = |O,0o) + |l,0i) be the decomposition of 
| 0} into its components in each direct summand. Then we may calculate directly: 

(0| Xi/j) = (ip olV’o) + (0i|0i) + (ipo\Dipi) + (ipi\D*ip 0 ) 

= 1 + 2Re('0o|Z>0i) 

< l + 2|<0o|I>0i>| 

<1 + 211^1111^0111 
<1 + 1 


Therefore p success = ^(ip\Xip) < | 

The above inequalities invite a partial converse to Theorem 4, which provided a solution to GROUP MULTIPLICATION 
using a pair of nontrivial dual representations in the two copies of C G . Let W \,..., W r denote the canonical 
summands of C G with projections 7q : V —f W t . Then we have 

PROPOSITION 4. Suppose \ip) is an input state that solves GROUP MULTIPLICATION with probability . 

Write |0) =0o + 0i where each 0, £ C G . Then the following holds for each canonical summand Wp. 

IM0o)ll = IK(0i)ll 

where n* : V —> W* is the canonical projection to the summand whose isotype is dual to the isotype of IT,;. 

Proof. The statement is a consequence of the conditions for equality in each of the inequalities used in the 
previous proof. Combined, they state that P SU ccess = if and only if 0o = Dip\. 

We examine D more properly: recall it is defined as 

D = hCh 

h£G 
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where for our purposes now, C is an arbitrary linear operator and h denotes its action as a linear operator on 
C G . As opposed to the operator T used in Proposition 3, D is not a C G module homomorphism. However, 
let 6i denote the orthogonal idempotent of C G corresponding to W,. It is well-known that 

ei = T^i ^ Xi(l)Xi(9~ % )9 

' ' g£G 

where \i is the character corresponding to the irreducible isotype of IT). Then a simple computation yields: 

e,D = De* 

where e^* = J2 g eG XiO-)Xi(9)d is the idempotent corresponding to W*. Therefore D leaves invariant the 

vector space direct sum decomposition C G = W\ ® ... ® W r , taking a summand to its dual. Therefore if 
if>o = Dipi , then the part of tpo hr W* is the same length as the part of ipi in W*. This concludes the proof.| 


5. Relation to Abelian Quantum Learning Problems 

In this section we recall some well-known abelian quantum learning problems and discuss how the results 
concerning SYMMETRIC ORACLE DISCRIMINATION provide a representation theoretic explanation of the 
construction and optimality of these algorithms, in particular the Bernstein-Vazirani and van Dam algo¬ 
rithms. 

The Bernstein-Vazirani problem. The Bernstein-Vazirani search problem is the task of identifying an 
element a £ ZJ given an oracle that returns a ■ x mod 2 when queried by x G Zip [15]. These oracles are 
highly symmetric; so much so in fact, that there is an algorithm that uses only a single query to identify the 
hidden string with certainty. The algorithm is summarized as follows: the oracles BV a act on (C 2 ) ra ® C 2 by 

BV a \x, i) = \x, i ® (a ■ x)) 

Let R®” denote the 2 n x 2 n Hadamard matrix and rj n = R® n |0) the equal superposition vector. A phase 
kickback calculation shows that by applying the oracle to the state | i ] n , —) followed by a Hadamard transform 
on the query register, we may measure this register in the computational basis to witness the outcome a 
with certainty. This is expressed by the following equation: 

I a,-} = (R®"0 J) BV a \Vn,~) 

This problem is directly addressed by our solution to SYMMETRIC ORACLE DISCRIMINATION once we notice 
that the map a i-a BV a is a unitary representation of with the canonical decomposition 

(C 2 ) n ®C 2 = 0 |a,->® W 0 



where Wo is an invariant subspace consisting of 2 n + 1 copies of the trivial representation. The remaining 
subrepresentations comprise a full set of non-trivial isomorphism types of irreducible representations of Zip. 
Therefore, the dimension bound tells us that the oracles can be distinguished with probability 1 in a single 
query. 

Furthermore, in this scenario the initial state constructed in Section 2 consists of equal contributions from 
each isomorphism type of irreducible representations. For the non-trivial representations, there is only one 
choice (up to phase), but for the trivial representation, any vector of suitable length taken from Wo may be 
chosen. In the above (and typical) presentation of the algorithm, the contribution from the trivial subspace 
is taken to be |0, —). However, we note that this choice, as well as the relative phases of these contributions 
may differ from the equal superposition, and the algorithm will still yield a perfect result. 
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The van Dam algorithm. The van Dam problem also considers the task of learning an element of Z£ 
but uses much less sophisticated oracles and makes use of multiple (non-adaptive) queries [13]. We consider 
a hidden element as a function / : {0, ...,n — 1} —> {0,1} and the oracles encode “evaluation queries”, 
i.e. a single query consists of an element of the domain i € {0, 1} and the response is f(i). Van 

Dam’s algorithm requires multiple queries to identify the function within a small probability of error and 
consists of two steps; the first step approximates the Bernstein-Vazirani oracles, and the second step may be 
interpreted as an instance of SYMMETRIC ORACLE DISCRIMINATION and thus we may apply our framework 
to this stage. 

The first step consists of using k queries to construct a new oracle Ak(f) acting on (C 2 ) n ® C via: 


Ak{f)\x,b) 


\x, b® (x- /)) if ||a;|| < k 
\x, b) if ||x|| > k 


Here ||a;|| denotes the Hamming weight of x € Z£. It is easy to check that / i-a Ak(f) is a unitary 
representation of ZI], and the case k = n reduces to the Bernstein-Vazirani oracles. 

The second stage of the algorithm consists of using the new oracles Ak(f) in a single query paradigm to 
guess the element /. Van Dam continues by choosing as an input state |where | rjk) is the equal 
superposition of those standard basis elements with Hamming weight less than or equal to k. Upon querying 
the oracle Ak(f), an n-fold Hadamard transform H® n is applied to the first n qubits and then this register 
is measured in the computational basis to yield the hidden element / with probability 


Ps 



We now analyse the second stage of this algorithm and show that given the oracles A^{f ), the provided 
algorithm is optimal. First we calculate the dimension bound. To that end, we see that the canonical 
decomposition of the representation is given by 

(C 2 ) n ®C 2 = 0 \x, —} © Wo 

X^Et^ 

\\x\\<k 

x^O 

where Wq is a trivial representation of dimension 2 n+1 — Y^i =1 (”) ■ Since Z!} is abelian, each isomorphism 
type of irreducible representation contributes only 1 to the dimension bound, so we have a maximal success 
probability of ^r(J2i=i (") + 1) = ^ (") which is the success probability of van Dam’s algorithm. 

Concerning the input state, the same comments may be made as in the Bernstein-Vazirani problem: the 
input state chosen by van Dam is an instance of the initial state constructed in Section 2, but apparently 
there is some flexibility in choosing a contribution from Wq and the relative phases of all contributions that 
lead to a similar result. 

These examples suggest a general strategy for constructing multi-query algorithms, which is to spend a 
certain number of queries setting up a symmetric single-query problem and then apply the solution to 
Symmetric Oracle Discrimination. 


6. Symmetric Oracle Identification with Ancilla Register 

In many situations in quantum computing, one is allowed to use an ancilla register. Consider the SYMMETRIC 
ORACLE Discrimination problem for some representation V of a group G. If we introduce an r-dimensional 
ancilla register Z = C r , our new Hilbert space is V ® Z and the oracle acts by Q{g) <8 Iz- 
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Tensoring with an r-dimensional trivial representation has the effect of multiplying by r the number of copies 
of each irreducible representation contained in V. That is, if Wk is an irreducible representation and m-k 
is the number of copies of Wk contained in V, then V ® Z contains rrrik copies of Wk- We thus have the 
following proposition, which follows directly from Theorem 1 and Lemma 2. 

PROPOSITION 5. Let 0 : G —> GL(V) be a finite dimensional representation of a finite group G. and let 

V = W® mi © W® m2 0 • • • 0 W® mr 


be the decomposition of V into nonisomorphic irreducible representations Wk- Let dk be the dimension of 
Wk- Then using an r-dimensional ancilla register, the optimal success probability for SYMMETRIC ORACLE 
Discrimination is given by 


-^success — | G | E min (rmk,d k )d k . 


Hence, if the size of the ancilla register is large enough, one can succeed with probability 


Ps 


success 


| G |E4, 


where the sum is taken over all the irreducible representations that appear in V with positive multiplicity. 

COROLLARY 2. Let V be a representation of G and consider the SYMMETRIC ORACLE DISCRIMINATION 
problem for V allowing as many ancilla qubits as desired. Then there exists a single-query probability 1 
solution to this problem if and only if every irreducible representation of G appears in V with positive 
multiplicity. 


7. Hidden Conjugating Element Problem 

In this section we consider the SYMMETRIC ORACLE DISCRIMINATION problem for the action of a group on 
itself by conjugation. If G is any finite group, then G acts on V = C G by 

0(s)(|ft» = \ghg~ 1 )- 


This defines a representation of G and we consider the SYMMETRIC ORACLE DISCRIMINATION problem for 
this representation. That is, we wish to determine a hidden element g £ G and we are given access to an 
oracle that a query x £ G with gxg~ x . We refer to this problem as the HIDDEN CONJUGATING ELEMENT 
Problem. 


Classically, with a single query x, we may determine g with probability 


-^classical 


\d(x) | 

\G\ 


where cl(x) denotes the conjugacy class of x. Thus, the optimal query is an element x £ G with the largest 
number of conjugates. 

We also observe that if g belongs to the center Z(G) of the group, i.e., g commutes with every element of 
g, then 0(g) = ly. Thus if Z(G ) ^ {e}, then it is impossible to determine g no matter how many classical 
or quantum queries are used. Thus we will assume that Z(G) = jej. (Alternatively one could work in the 
group G/Z(G ).) 

As we have seen, we can determine the optimal success probability for this problem if we know how to 
decompose the conjugation representation into irreducible representations. 
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LEMMA 4. Let G be a finite group and let V be the conjugation representation defined above. Let W be 
any irreducible representation with character \w and m-w be the multiplicity of W in V. Then mw equals 
the sum of the xw row of the character table of G. That is, 

m w = ^2xw{g), 


where the sum is computed by choosing one element from each conjugacy class of G. 

Proof. Since V is a permutation representation, the character value xv(g) is the number of fixed points of 
g, i.e., 

Xv{g) = \Cg{9)\ = | L'L , 

|c%) I 

where Cc(g) is the centralizer of g , i.e., all elements of G that commute with g. Hence, 


m w = (xv,Xw) 


\ d (s)\] -^yXwig) = ^2xw(g), 


|G| 


where all sums are computed using one element from each conjugacy class of G. f 

We now consider the dihedral group D n of order 2n. Here we assume that n is odd, since if n is even, Z(D n ) 
is nontrivial. For odd n we show that HIDDEN CONJUGATING ELEMENT PROBLEM for D n has a single 
query probability one solution. 


THEOREM 7. If G = D n is the dihedral group of order n, where n is a positive odd integer. Then using a 
single ancilla qubit, there is a probability one algorithm for HIDDEN CONJUGATING ELEMENT PROBLEM. 


Proof. From the character table of D n and Lemma 4, we find that the conjugation representation V contains 
copies of the trivial representation, copies of the one-dimensional alternating representation, and 
a single copy of each of the two-dimensional irreducible representations. After tensoring with two- 
dimensional ancilla register, we find that every irreducible representation W of D n appears at least dim W 
times. It follows that there is a single query algorithm that succeeds with probability one. | 

Note that classically, the best we can do with one query is probability p = 1/2. Also note that without an 
ancilla qubit, we find c?e = so the best we can do with a single quantum query is p = 1/2 + l/2n, only 
slightly better than classical. 


For the symmetric group S n , we also obtain a probability one single-query algorithm for any n. In contrast, 
the optimal classical algorithm succeeds with probability 1 / n. 

Theorem 8. Consider Hidden Conjugating Element Problem for the symmetric group S n , allowing 
ancilla qubits. For any n, there is a single-query probability 1 algorithm. 

Proof. Frumkin [16] showed that the conjugation representation for S„ contains at least one copy of every 
irreducible representation of S n . Hence the theorem follows from Proposition 5. g 

As we have seen, for certain classes of groups, the conjugation representation contains every irreducible 
representation. The question of which groups have this property was investigated in 1971 by Roth [17], who 
gave families of groups for which this is true. Roth further conjectured that this is case for any group, provided 
that the center is trivial. Shortly after Roth’s conjecture, however, Formanek [18] found a counterexample. 
Hence, there are groups G with trivial center for which HIDDEN CONJUGATING ELEMENT PROBLEM cannot 
be solved with a single query, even allowing as many ancilla qubits as desired. 


In spite of this, it still seems possible that the representations left out of the conjugation representation are 
scarce. In this case, by Proposition 5, the success probability will be close to 1. We thus ask for groups with 
trivial center: 
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Question 1. As |G| -4 oo, does the probability of solving HIDDEN CONJUGATING ELEMENT PROBLEM 
approach 1? 

In 1997, Roichnran [19] studied in greater detail the decomposition of the conjugation representation when 
G = S n . He established that (in some precise sense) for most irreducible representations W of S n , the 
number mw of copies of W appearing in the conjugation representation is approximately equal to dim W. 
Statements of this form, if true for other classes of groups, should force an affirmative answer to Question 1 
for those classes of groups. 


8. Further Questions 

For which groups and which representations can optimal inputs, such as those characterized in Proposition 
2, be constructed efficiently? This question applies both to general SYMMETRIC ORACLE DISCRIMINATION 
and to GROUP Multiplication. It is easy to see that there is an efficient way to do this in the case of 
abelian groups. In the case of GROUP MULTIPLICATION, Theorem 4 illustrates that one needs only a single 
isotypic component of C G and its dual to produce an optimal algorithm. For groups admitting a nontrivial 
abelian quotient, this isotypic component may be chosen to be one dimensional and producing an optimal 
input amounts to identifying these one dimensional subspaces. 

Another immediate problem is to extend Proposition 4 to give a complete characterization of the inputs that 
are optimal for GROUP MULTIPLICATION. In particular, must we involve those states which are optimal for 
Symmetric Oracle Discrimination with respect to the representation of G x G? These states are used 
in the algorithms provided in Theorems 3 and 4. We took advantage of the fact that such states encode the 
character of a representation, as expressed in Lemma 3. However it is still unknown whether this is necessary 
for optimal algorithms solving GROUP MULTIPLICATION. 
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